What it does
Vendors assessed against NERC CIP supply chain rules.
A profile per vendor
What the vendor supplies sets which CIP supply chain requirements apply to it.
Assess the evidence
Assess the vendor's documents or its security page against those requirements.
Risk score and gaps
A risk score with each gap cited to CIP-013 and the related CIP standards.
Remediation actions
Actions to close each gap, with an owner for each finding.
Assessment history
Every assessment kept, so you can show how a vendor changed over time.
Export
Download the assessment as PDF or CSV for audit or the board.
In the product
Vendors, screen by screen.
How it works
How Vendors works, in 3 steps.
1
Add the vendor
Name it and say what it supplies, such as EMS software or remote support.
2
Run the assessment
Upload up to 5 of its documents or point to its security page.
3
Track the findings
Assign each gap and close it.
Who uses it
Who uses Vendors
Every feature, on every plan.
Vendors is included from Essentials up.